This mailing list is correct, CVEs are sent to the users list and also should be sent to the dev list.
On Wed, Feb 8, 2023 at 11:12 AM Jonathan Card < jonathan.c...@intersystems.com> wrote: > Is there a mailing list to subscribe to potential CVE notices? It looks > like I can’t/shouldn’t subscribe to security@…, because that’s for > reporting vulnerabilities, and it’s not clear if there is a mailing list > that would be exclusively for security updates, and where they would be > announced. > > Thank you. > > Jonathan Card > Software Engineer, Intersystems > jc...@intersystems.com<mailto:jc...@intersystems.com> > > > > >